Re[4]: [analog-help] CGI Error on NT IIS 4

[Aengus Lawlor]

On Fri, 22 Oct 1999, Stephen Turner wrote:
> On Fri, 22 Oct 1999, Stephen Turner wrote:
> 
>>> On Thu, 21 Oct 1999, Aengus Lawlor wrote: > > 
>>> The documentation says of CGI ON that "You can't choose any options that 
>>> way though". This isn't my experience. I just typed in the following URL 
>>> 
>>> http:///analog/analog.exe?c:\logs\jun.log+c:\logs\jul.log+%2bC"H 
>>> OSTNAME+Test"+%2bO-+%2bC"CGI%20ON"
>>> 
>>> and got a report for the two logs specified, and with the specified 
>>> hostname.
>>
>> Hmmm. It looks as if your server is passing those arguments in on the
>> command line. I didn't think that was normal behaviour, but I'll check on 
>> my Apache this evening.
>> 
>> In this case, it's a serious security risk. The anlgform.pl filters out
>> certain dangerous arguments. For example, if someone specified HEADERFILE 
>> in your example, they could view any file on the system. Don't keep it 
>> there!
>
>OK, as far as I can see Apache doesn't pass the arguments. Is this IIS 
>doing this?

Yes (IIS3 and IIS4). Isn't it supposed to pass GET parameters like that? I 
have an old copy of Netscape FastTrack server, and it also passes the 
parameters on the command line, but it's apparently munging them in some 
way, because I get an error:

http:///analog/analog.exe?%2bC"HOSTNAME%20Test"

generates these errors:
analog.exe: Warning C: Unknown configuration command: ignoring it:
  "HOSTNAME
analog.exe: Warning F: Failed to open logfile Test": ignoring it

I used this ANALOG.CFG for this test:
LOGFILE c:\logs\*.log
CGI ON
OUTFILE stdout
ERRFILE error.txt

(The NS logfile only captured the last line of STD err - ERRFILE helped a 
great deal. I also tried to escape the " to %22. Analog is definietly getting 
the arguments, it's just confused about them).

>At this moment, I'm minded to remove the CGI command from analog altogether, 
>and only allow CGI access via anlgform.pl. This is in some ways less 
>convenient, but I don't think I can advertise a feature when it's very 
>likely to be set up as a security risk.

Does this just mean taking the "Content-Type: text/html;" line out of the 
EXE, and having the script create it? Or would it entail more extensive 
changes? How about just disabling HEADERFILE (and the other dangerous 
parameters) if CGI ON is set?

>In fact, it's worse than that. Even if people don't ever find the CGI 
>command, they still sometimes put analog.exe in their CGI directory, 
>thinking it's somehow a CGI script [*], and they would still be vulnerable 
>to this exploit.
>
>Does anyone have any comments on this proposal (to disable the CGI 
>command), for or against?

Setting up Analog with the forms interface is definitely confusing 
(until you get it working - and then it's all obvious :-). The 
simplicity of having analog.exe doing the CGI headers itself is very 
attractive, but it definitely opens a can of worms!

Aengus

This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

[analog-help] PROCTIME Report

[gus]

Hi!

I'd like to analyze the processing times of our web requests (IIS4, W3C-extended
log file, analog 3.90beta1/Win32) and discovered the following problems:

- The report has only 10 lines with the last line 
  listing all requests that take longer than 300 
  milliseconds. 99% of my request take longer than 
  300 msecs (they are search engine queries) so in 
  this configuration the report is useless to me.
  Is there a way to list more than 10 lines or to do
  something like PROCTIMEFLOOR to get an analysis of
  the "long-time" requests?

- The report column heading says "seconds" - but 
  the time-taken units are milliseconds.

Thanks in advance
  Guido

This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: =?iso-8859-1?Q?Re:_[analog-help]_Can=B4t_get_past_days_s

[Paulo . Ayres]

Thank´s Aengus,

I´ll take look on Monday.

Regards,
Paulo Eric




[EMAIL PROTECTED] (Aengus Lawlor) em 22/10/99 18:02:42

Favor responder a [EMAIL PROTECTED]

Para: [EMAIL PROTECTED]
cc:(bcc: Paulo Eric da Silveira Ayres/STJ)
Assunto:  Re: =?iso-8859-1?Q?Re:_[analog-help]_Can=B4t_get_past_days_s





Analog can cache some of the data from previous runs to do the kind of
thing you want. See docs/cache.html for more info.

Aengus


__ Reply Separator _
Subject: =?iso-8859-1?Q?Re:_[analog-help]_Can=B4t_get_past_days_stats
Author:  [EMAIL PROTECTED] at Internet
Date:10/22/99 6:02 PM



Dear Stephen,

Guess I got it.

I thought that analog could get information from the last html page (generated
just one day before).

Before I create my script...
Will I have to extract an run analog for each old log file, one by one, every
day, to have the complete stats up to date ? Is that way ?

Thank's for your help !
Paulo Eric




Stephen Turner <[EMAIL PROTECTED]> em 22/10/99 11:26:06

Favor responder a [EMAIL PROTECTED]

Para: [EMAIL PROTECTED]
cc:(bcc: Paulo Eric da Silveira Ayres/STJ)
Assunto:  Re: [analog-help] Can't get past days stats




This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] REQUEST redirection problem

[Stephen Turner]

On Thu, 21 Oct 1999, John Ebbert wrote:

> Hello,
> 
> I'm having difficulty seeing what files are being requested when using my 
> "redir.pl" script.
> 
> The request in the log file is:
> 
> "http://www.mydomain.com/redir.pl?url=www.elsewhere.com"
> 
> But in the request report output by Analog, all that shows is:
> 
> "redir.pl"
> 
> There's no trace of where the user went even though I can see it there in 
> the raw log.  I'm sure I'm doing something dumb.  I'm using Analog 3.90 
> beta1 for the Mac.

This is in the FAQ.

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: =?iso-8859-1?Q?Re:_[analog-help]_Can=B4t_get_past_days_s

[Aengus Lawlor]

Analog can cache some of the data from previous runs to do the kind of 
thing you want. See docs/cache.html for more info.

Aengus


__ Reply Separator _
Subject: =?iso-8859-1?Q?Re:_[analog-help]_Can=B4t_get_past_days_stats
Author:  [EMAIL PROTECTED] at Internet
Date:10/22/99 6:02 PM



Dear Stephen,

Guess I got it.

I thought that analog could get information from the last html page (generated 
just one day before).

Before I create my script...
Will I have to extract an run analog for each old log file, one by one, every 
day, to have the complete stats up to date ? Is that way ?

Thank's for your help !
Paulo Eric




Stephen Turner <[EMAIL PROTECTED]> em 22/10/99 11:26:06

Favor responder a [EMAIL PROTECTED]

Para: [EMAIL PROTECTED]
cc:(bcc: Paulo Eric da Silveira Ayres/STJ) 
Assunto:  Re: [analog-help] Can't get past days stats




This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: Re[2]: [analog-help] CGI Error on NT IIS 4

[Susan Alderman]

At 07:24 PM 10/22/1999 +0100, you wrote:
>It seems to me, as I explained before, that this is a serious security
>risk. Of course, I can warn people about it, but they won't necessarily
>know, or be able to find out easily, whether their server is an at-risk one.
>Or even read the instructions.
>
>At this moment, I'm minded to remove the CGI command from analog altogether,
>and only allow CGI access via anlgform.pl. This is in some ways less
>convenient, but I don't think I can advertise a feature when it's very
>likely to be set up as a security risk.


I'd vote for removing the CGI command - one of the things that analog
has going for it is that it's simple to use, simple to set up.  When
you start getting into security issues like this, all of a sudden
it's NOT simple to use/set up and people are liable to get bitten.

(Admit it - how many people out there really read ALL the docs?)

Thanks,
Susan


Susan Alderman  [EMAIL PROTECTED]
Box 1885vox: 401-863-9466
CIS, Brown University   fax: 401-863-7329
Providence, RI 02912

This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] CGI Error on NT IIS 4

[Jeff Longland]

> I'd vote for removing the CGI command - one of the things that analog
> has going for it is that it's simple to use, simple to set up.  When
> you start getting into security issues like this, all of a sudden
> it's NOT simple to use/set up and people are liable to get bitten.
>
> (Admit it - how many people out there really read ALL the docs?)

I agree - but if the CGI command is removed - can we PLEASE get a form interface
that will work on Windows machines that don't have Activestate Perl32?


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] Can´t get past days stats

[Paulo . Ayres]

Dear Stephen,

Guess I got it.

I thought that analog could get information from the last html page (generated
just one day before).

Before I create my script...
Will I have to extract an run analog for each old log file, one by one, every
day, to have the complete stats up to date ? Is that way ?

Thank´s for your help !
Paulo Eric




Stephen Turner <[EMAIL PROTECTED]> em 22/10/99 11:26:06

Favor responder a [EMAIL PROTECTED]

Para: [EMAIL PROTECTED]
cc:(bcc: Paulo Eric da Silveira Ayres/STJ)
Assunto:  Re: [analog-help] Can´t get past days stats





On Thu, 21 Oct 1999 [EMAIL PROTECTED] wrote:

> Dear guys,
>
> I?m using Analog 3.32 for Unix and it works once a day, every day in my
crontab.
> My access.log (generated by Apache) is too big, therfore, I have to compress,
> kill and start another one form zero,  every day.
>
> I don?t know why, but each time analog runs, it don?t recognize the stats just
> made the day before. It seems that every day is the first analise day (and
> really is,according to the top of the output file).
>
> Could you help me ? I didn?t see nothing like this on the site/FAQs/list?s
> archive.

Have you told it to read the old logfiles? Have you told it how to
uncompress them?

--
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] PROCTIME Report

[Jason Linhart]

On 10/22/99 2:41 PM gus ([EMAIL PROTECTED]) wrote:

>Stephen Turner schrieb:
>> The longest time is 300 seconds. Analog must be confused about your log
>
>Not Analog, but me ;-)
>
>> Otherwise, what does the header line of your logfile look like? 
>
>Here's an excerpt:
>#Software: Microsoft Internet Information Server 4.0
>#Version: 1.0
>#Date: 1999-10-10 06:40:23
>#Fields: date time c-ip cs-username s-sitename cs-method cs-uri-stem 
>cs-uri-query sc-status sc-win32-status time-taken cs-version
>1999-10-10 15:14:54 195.227.21.21 - W3SVC3 GET /doku/copy2cic.htm - 200 0 
>78 HTTP/1.0
>1999-10-10 15:14:54 195.227.21.21 - W3SVC3 GET /doku/copy2cic2.jpg - 200 0 
>204 HTTP/1.0
>1999-10-10 15:14:54 195.227.21.21 - W3SVC3 GET /doku/copy2cic1.jpg - 200 0 
>375 HTTP/1.0
>
>> The extended logfile spec  
>> defines "time-taken" to be "Time taken for transaction to complete 
>> in seconds".
>
>You're right! So I tried to search in the newsgroups and at 
>msdn.microsoft.com but I found nothing about a bug after NT4-SP4. Do you 
>know if other webservers
>implement it as seconds?

TIME-TAKEN in Microsoft IIS logs is in units of 1/100ths of a second. 
Recording the transfer time in seconds is completely useless, most 
transactions take under a second.

The extended logfile spec. is hardly a specification. It is a very early 
draft of a specification that was never completed.

No other server appears to support that particular field. WebSTAR has 
something similar called TIME_TAKEN and records it as HH:MM:SS in some 
releases and as 60ths of a second in other releases.

Jason

-
[EMAIL PROTECTED]
-
Dr. Seuss books . . . can be read and enjoyed on several levels. For
example, 'One Fish Two Fish, Red Fish Blue Fish' can be deconstructed
as a searing indictment of the narrow-minded binary counting system.
  -- Peter van der Linden, Expert C Programming, Deep C Secrets



This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] CGI Error on NT IIS 4

[Stephen Turner]

On Thu, 21 Oct 1999, Jeremy Wadsack wrote:
> >
> > I've posted an executable version of the form interface at
> > http://www.wadsack-allen.com/digitalgroup/anlgform.zip (753k)
> > Given the size, it probably won't make sense to bundle this with the Win32
> > binary package of 4.0 so I'm happy to continue hosting it there.
> >

I've put this on the helper apps page.

> > To use this you MUST have the form interface in the same directory as the
> > analog.exe. (Or more precisely, it expects to find analog.exe in the
> > directory it resides in. This is the same problem that the last version had,
> > though that was c:\analog\, but this may be something that can be worked
> > around before release.)
> >

Are there instructions in the zip, by the way?

I will respond to your comments about the form interface soon. But one
thing I do remember I was going to ask: have you tried it without the
AllocConsole() [but via IIS]?

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] PROCTIME Report

[gus]

Stephen Turner schrieb:
> The longest time is 300 seconds. Analog must be confused about your log

Not Analog, but me ;-)

> Otherwise, what does the header line of your logfile look like? 

Here's an excerpt:
#Software: Microsoft Internet Information Server 4.0
#Version: 1.0
#Date: 1999-10-10 06:40:23
#Fields: date time c-ip cs-username s-sitename cs-method cs-uri-stem cs-uri-query 
sc-status sc-win32-status time-taken cs-version
1999-10-10 15:14:54 195.227.21.21 - W3SVC3 GET /doku/copy2cic.htm - 200 0 78 HTTP/1.0
1999-10-10 15:14:54 195.227.21.21 - W3SVC3 GET /doku/copy2cic2.jpg - 200 0 204 HTTP/1.0
1999-10-10 15:14:54 195.227.21.21 - W3SVC3 GET /doku/copy2cic1.jpg - 200 0 375 HTTP/1.0

> The extended logfile spec  
> defines "time-taken" to be "Time taken for transaction to complete 
> in seconds".

You're right! So I tried to search in the newsgroups and at msdn.microsoft.com but I 
found nothing about a bug after NT4-SP4. Do you know if other webservers
implement it as seconds?

Regards
  Guido

This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: Re[2]: [analog-help] CGI Error on NT IIS 4

[Stephen Turner]

On Fri, 22 Oct 1999, Stephen Turner wrote:

> On Thu, 21 Oct 1999, Aengus Lawlor wrote:
> > 
> > The documentation says of CGI ON that "You can't choose any options that 
> > way though". This isn't my experience. I just typed in the following URL
> > 
> > http:///analog/analog.exe?c:\logs\jun.log+c:\logs\jul.log+%2bC"H
> > OSTNAME+Test"+%2bO-+%2bC"CGI%20ON"
> > 
> > and got a report for the two logs specified, and with the specified 
> > hostname.
> 
> Hmmm. It looks as if your server is passing those arguments in on the
> command line. I didn't think that was normal behaviour, but I'll check on
> my Apache this evening.
> 
> In this case, it's a serious security risk. The anlgform.pl filters out
> certain dangerous arguments. For example, if someone specified HEADERFILE in
> your example, they could view any file on the system. Don't keep it there!
> 

OK, as far as I can see Apache doesn't pass the arguments. Is this IIS doing
this?

It seems to me, as I explained before, that this is a serious security
risk. Of course, I can warn people about it, but they won't necessarily
know, or be able to find out easily, whether their server is an at-risk one.
Or even read the instructions.

At this moment, I'm minded to remove the CGI command from analog altogether,
and only allow CGI access via anlgform.pl. This is in some ways less 
convenient, but I don't think I can advertise a feature when it's very
likely to be set up as a security risk.

In fact, it's worse than that. Even if people don't ever find the CGI
command, they still sometimes put analog.exe in their CGI directory,
thinking it's somehow a CGI script [*], and they would still be vulnerable
to this exploit.

Does anyone have any comments on this proposal (to disable the CGI
command), for or against?


[*] I've even had people write to me very confused because they tried to
open analog.exe in a text editor, and it doesn't look like a CGI (presumably 
meaning Perl) script.

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] LOGFORMAT

[Stephen Turner]

On Wed, 20 Oct 1999, Jim Balcom wrote:
> ST>>
> ST>>And is the LOGFILE command below the LOGFORMAT command?
> 
> Yes, it is.
> 

I don't really have anything more to suggest here. But you could use
PRINTVARS ON to get analog to say what it thinks you've asked it to do.

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] PROCTIME Report

[Stephen Turner]

On Fri, 22 Oct 1999, gus wrote:

> Hi!
> 
> I'd like to analyze the processing times of our web requests (IIS4, W3C-extended
> log file, analog 3.90beta1/Win32) and discovered the following problems:
> 
> - The report has only 10 lines with the last line 
>   listing all requests that take longer than 300 
>   milliseconds. 99% of my request take longer than 
>   300 msecs (they are search engine queries) so in 
>   this configuration the report is useless to me.
>   Is there a way to list more than 10 lines or to do
>   something like PROCTIMEFLOOR to get an analysis of
>   the "long-time" requests?
> 
> - The report column heading says "seconds" - but 
>   the time-taken units are milliseconds.
> 

The longest time is 300 seconds. Analog must be confused about your log
format.

Did you give an explicit LOGFORMAT yourself? If so, I think you got it
wrong.

Otherwise, what does the header line of your logfile look like? The extended
logfile spec  defines "time-taken" to
be "Time taken for transaction to complete in seconds". If this is in
milliseconds, it's a serious bug in your server.

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] Can´t get past days stats

[Stephen Turner]

On Thu, 21 Oct 1999 [EMAIL PROTECTED] wrote:

> Dear guys,
> 
> I´m using Analog 3.32 for Unix and it works once a day, every day in my crontab.
> My access.log (generated by Apache) is too big, therfore, I have to compress,
> kill and start another one form zero,  every day.
> 
> I don´t know why, but each time analog runs, it don´t recognize the stats just
> made the day before. It seems that every day is the first analise day (and
> really is,according to the top of the output file).
> 
> Could you help me ? I didn´t see nothing like this on the site/FAQs/list´s
> archive.

Have you told it to read the old logfiles? Have you told it how to
uncompress them?

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] FW: Making Analog LOGFORMAT work with htdig logs

[Stephen Turner]

The spaces in [%q] aren't a problem because the %q just carries on until
right-bracket is hit. Errors I can see: you've got j% instead of %j: you're
missing a colon near the %S. Version 3.90 of analog will tell you which part
of a line was corrupt, which you might find useful here.

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

[analog-help] report of failure sort by code errors (number of errors versus code error) is it possible ?

[Jean Claude Scholle]

 give a report of errors - Failed requests with codes in the
400's (error in request) or 500's (server error) - with the name of files
generating the errors.

Is it possible to have a similar report of failure with code errors (ie %
errors - or number of errors versus code error).

Environment - renewable energy - development - consultants
Ecosytemes - 1 rue de la chapelle - 64210 - Bidart - France
tel : +33 (0)559 54 97 08  -  fax: +33 (0)559 54 75 56
email : <[EMAIL PROTECTED]>
http://www.univ-pau.fr/~scholle/ecosystemes



This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

[analog-help] report of failure sort by host (number of errors code versus host) is it possible ?

[Jean Claude Scholle]

 give a report of errors - Failed requests with codes in the
400's (error in request) or 500's (server error) - with the name of files
generating the errors.

Is it possible to have a similar report of failure with hosts generating
the errors (ie % errors code - or number of errors code versus host).

Environment - renewable energy - development - consultants
Ecosytemes - 1 rue de la chapelle - 64210 - Bidart - France
tel : +33 (0)559 54 97 08  -  fax: +33 (0)559 54 75 56
email : <[EMAIL PROTECTED]>
http://www.univ-pau.fr/~scholle/ecosystemes



This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

[analog-help] is it possible ?

[Jean Claude Scholle]

Is it possible to read with ANALOG 332 the logfile if the name input file
include the date (available with Unix -server appache) for exemple  as for the .

Environment - renewable energy - development - consultants
Ecosytemes - 1 rue de la chapelle - 64210 - Bidart - France
tel : +33 (0)559 54 97 08  -  fax: +33 (0)559 54 75 56
email : <[EMAIL PROTECTED]>
http://www.univ-pau.fr/~scholle/ecosystemes



This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] CGI Error on NT IIS 4

[Stephen Turner]

Sorry, didn't mean to send my previous message with this subject to the
list.

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] New forms Interface

[Stephen Turner]

On Wed, 20 Oct 1999, Aengus Lawlor wrote:

> I downloaded the new version to try the form interface, and I'm afraid I 
> got an unpleasant surprise. anlgform is now implemented as a perl 
> script, and I don't have perl installed on my server, so I couldn't use 
> it.
> 
> I'm not knocking perl, and the ActiveState implementation is very 
> impressive, but I'm not going to be able to get permission to install it 
> on our production NT servers. I hope someone will implement this 
> functionality as a standalone .EXE. (The perl script approach is 
> obviously much more flexible, but one of the attractions of Analog is 
> that it doesn't involve the installation of any DLLs or registry 
> entries).
> 

It's also more secure than an exe because you can read the source. And it's
modifiable by the person installing it. (So for example, you no longer
need to have analog in a place I decide).

I'm just explaining my reasons for moving to Perl. It wasn't a decision I
took lightly as I had to learn Perl first. But I think it's the better
solution.

Anyway, I believe Jeremy has made a compiled version of the Perl script
available as an exe now.

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] still seeing compiling errors with Solaris

[Simon McClenahan]

- Original Message - 
From: Stephen Turner <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, October 22, 1999 2:55 AM
Subject: Re: [analog-help] still seeing compiling errors with Solaris


> On Thu, 21 Oct 1999, Catherine Montalvo wrote:
> 
> > Ok, I got gcc installed on our Solaris Box.
> > However, now I am receiving the error below when running the make
> > command.
> > _
> > 
> > ld.so.1: make: fatal: relocation error: file make: symbol stat64:
> > referenced symbol not found
> > Killed
> > ___
> > 
> 
> I'm afraid it looks as though gcc isn't set up properly. Have you succeeded
> in building other programs with it?


In particular, the error is happening with the make executable itself. The ld.so error 
tells us that the LD_LIBRARY_PATH is pointing to shared libraries that are 
incompatible or non-existent, which is required by the make program when it was 
compiled.

Don't just check the gcc installation, also check your LD_LIBRARY_PATH environment 
variable, and the make installation.

cheers,
Simon



This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] Analog 3.32 gcc compiled binary bus error

[Stephen Turner]

On Fri, 22 Oct 1999, Devendra Narayan wrote:

> Strange problem - looking for solutions !
> 
> I compiled the 3.32 version of Analog with gcc ( version
> 2.95.1 ) on a Solaris 2.6 server. It compiles fine
> but dumps core ( bus error after it has finished processing
> all the log entries ). Same thing with the 3.90b version.
> 

Never heard of this one. If you can narrow it down to a short logfile, which
you can mail to me privately ([EMAIL PROTECTED]), I'll look into
it.

> Another minor problem. How to stop getting 'zillions'
> of referrer entries in the output - see sample below.
> I have tried using 
> 
> REFFLOOR -20r
> REFDIRFLOOR -2r
> REFSITEFLOOR -20r
> 
> etc. without any effect. I just want the top
> 20 referrer sites ( no details ) - hints please :-)
> 

REFARGSFLOOR 1000r

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] still seeing compiling errors with Solaris

[Stephen Turner]

On Thu, 21 Oct 1999, Catherine Montalvo wrote:

> Ok, I got gcc installed on our Solaris Box.
> However, now I am receiving the error below when running the make
> command.
> _
> 
> ld.so.1: make: fatal: relocation error: file make: symbol stat64:
> referenced symbol not found
> Killed
> ___
> 

I'm afraid it looks as though gcc isn't set up properly. Have you succeeded
in building other programs with it?

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: [analog-help] Linux Apache Configuration question

[Stephen Turner]

On Thu, 21 Oct 1999, Jason Clark wrote:

> Correct, I removed that line and it now uses data from my server, but
> I still can't get the anlgform.html to work, the form shows up, but
> instead of the on/off buttons being visible, it's just text.  Is this
> supposed to run as an interactive cgi from my web server?
> 

Read docs/form.html !

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/

Re: Re[2]: [analog-help] CGI Error on NT IIS 4

[Stephen Turner]

On Thu, 21 Oct 1999, Aengus Lawlor wrote:
> 
> The documentation says of CGI ON that "You can't choose any options that 
> way though". This isn't my experience. I just typed in the following URL
> 
> http:///analog/analog.exe?c:\logs\jun.log+c:\logs\jul.log+%2bC"H
> OSTNAME+Test"+%2bO-+%2bC"CGI%20ON"
> 
> and got a report for the two logs specified, and with the specified 
> hostname.

Hmmm. It looks as if your server is passing those arguments in on the
command line. I didn't think that was normal behaviour, but I'll check on
my Apache this evening.

In this case, it's a serious security risk. The anlgform.pl filters out
certain dangerous arguments. For example, if someone specified HEADERFILE in
your example, they could view any file on the system. Don't keep it there!

-- 
Stephen Turner[EMAIL PROTECTED]http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
  "Due to the conflict in Kosovo, we will not be showing the movie Wag the
   Dog. Instead, we will show Mortal Kombat: Annihilation." Cable & Wireless


This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/analog-help@lists.isite.net/